Critical severity9.8NVD Advisory· Published Aug 16, 2018· Updated Jun 17, 2026

CVE-2018-11511

Description

The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'album_id' or 'scope' parameter via a photo-gallery/api/album/tree_lists/ URI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Asustor/Adminferred2 versions
= 3.1.0.RFQ3+ 1 more
- (no CPE)range: = 3.1.0.RFQ3
- (no CPE)range: =3.1.0.RFQ3

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/148919/ASUSTOR-NAS-ADM-3.1.0-Remote-Command-Execution-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/45200/nvdExploitThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.009
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000